From foo@bar  Tue Oct 27 08:30:04 2026
Format: 1.8
Date: Mon, 26 Oct 2026 20:00:13 +0100
Source: libxpm
Binary: libxpm-dev libxpm4 libxpm4-dbgsym xpmutils xpmutils-dbgsym
Architecture: hppa
Version: 1:3.5.20-1
Distribution: sid
Urgency: medium
Maintainer: hppa Build Daemon (paladin) <buildd@paladin.parisc-linux.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Description:
 libxpm-dev - X11 pixmap library (development headers)
 libxpm4    - X11 pixmap library
 xpmutils   - X11 pixmap utilities
Closes: 1149666
Changes:
 libxpm (1:3.5.20-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1149666)
     - CVE-2026-94287: DoS via unsigned underflow in libXpm's write path.
   * Update signing-key.asc.
Checksums-Sha1:
 644836c9a575dde1556c19a939e23c6f0ed468b7 130248 libxpm-dev_3.5.20-1_hppa.deb
 289f87c19b126473ca43f33ed10c60462ab8a681 101128 libxpm4-dbgsym_3.5.20-1_hppa.deb
 0a10a015865c48e5dfe4c60caa07044bfd199358 57804 libxpm4_3.5.20-1_hppa.deb
 17db389c20a88bffe85663dbb3dd9e594a261b04 7058 libxpm_3.5.20-1_hppa.buildinfo
 85b1cbddd96cbd57f0a4d85dda4960893f3fa518 53360 xpmutils-dbgsym_3.5.20-1_hppa.deb
 f84337f61d61c665427a47f8bb43d475fbef331c 48156 xpmutils_3.5.20-1_hppa.deb
Checksums-Sha256:
 6af621c26f697e213163bb1a971de5fbb11fa2b0faaad72dd66756cfa11a02af 130248 libxpm-dev_3.5.20-1_hppa.deb
 46b407684ee055e6d663fc527d1b4b94556511dc84bb921ef8ecb96edb994b5f 101128 libxpm4-dbgsym_3.5.20-1_hppa.deb
 d12180261ee519f99e65b8559cc8da9b7967a43548e47be1a2f3a3c690e2e7b7 57804 libxpm4_3.5.20-1_hppa.deb
 ce9ded7121dd3c192b15fa487a563d44892699ea369636bdb1c0eac9c97b693c 7058 libxpm_3.5.20-1_hppa.buildinfo
 91068076788aebd01599a80713661d59b2e7d829e0dda16a2aa87248b36a7b42 53360 xpmutils-dbgsym_3.5.20-1_hppa.deb
 82243626f6671c3944d4e79e15385c2e6d7f8b1005ef6135f4142df93a526403 48156 xpmutils_3.5.20-1_hppa.deb
Files:
 8f6e2dc9f6230327d45a562914f4ee2a 130248 libdevel optional libxpm-dev_3.5.20-1_hppa.deb
 987dca4f434037fe4100e9134827e082 101128 debug optional libxpm4-dbgsym_3.5.20-1_hppa.deb
 5ab357a22a73bb61ee2f4c3459e9a9bc 57804 libs optional libxpm4_3.5.20-1_hppa.deb
 52a24a911c53ef14f0fe2d9929ba973f 7058 x11 optional libxpm_3.5.20-1_hppa.buildinfo
 b21b6dd013491ab9a247c8a42f125ccb 53360 debug optional xpmutils-dbgsym_3.5.20-1_hppa.deb
 83e2a9715e1209fafb01215842b1b5bd 48156 x11 optional xpmutils_3.5.20-1_hppa.deb
Signed-By: Debian buildd autosigning key for paladin <buildd_hppa-paladin@buildd.debian.org>